Page Comparison

...

1. Pretty print the configuration for a better overview: Pretty-print the configuration files

2. Add the following section to the config file: ~/etc/check_mk/multisite.d/wato/roles.mk
   

   Code Block
   language py theme RDark collapse true
   'agent': {'alias': 'agents registration and download', 'basedon': None, 'builtin': True, 'permissions': {'general.use': True, 'wato.download_all_agents': True, general.see_all': True}}})

   
   

3. Now we build a new role, only to register the Checkmk Agent with two roles! The whole config file should look like this:
   

   Code Block
   language py theme RDark collapse true
   # Written by Checkmk store roles.update({'admin': {'alias': 'Administrator', 'builtin': True, 'permissions': {}}, 'admin': {'alias': 'Administrator', 'basedon': 'admin', 'builtin': False, 'permissions': {}}, 'guest': {'alias': 'Guest user', 'builtin': True, 'permissions': {}}, 'user': {'alias': 'Normal monitoring user', 'builtin': True, 'permissions': {}}, 'agent': {'alias': 'agents registration and download', 'basedon': None, 'builtin': True, 'permissions': {'general.see_all': True, 'general.use': True, 'wato.download_all_agents': True}}}) ~

   
   

Agent Pairing for TLS Encryption

For a user to be able to do the "cmk-agent-ctl register", which is needed to enable the TLS encryption (available from 2.1.0 onwards), you have to add the right "Agent pairing" (internal name "general.agent_pairing") to his/her role.

Related articles

...